Services03
Gap analysis, remediation roadmaps and audit-ready policies for NCA controls, Qatar's NIA standard and ISO 27001.
01
Who it's for
For entities required to meet NCA controls or the NIA standard, or preparing for ISO 27001.
02
Signs you need it
- You must meet NCA controls or the NIA standard, or are preparing for ISO 27001.
- Policies exist on paper but don't reflect how you actually work.
- An audit is coming up and you're not sure where you stand.
03
What you get
- 01Precise gap analysisWe measure your current state against each control and pinpoint what's missing.
- 02Audit-ready policiesPolicies and procedures written for how you actually work, in Arabic and English.
- 03Organized evidenceWe assemble the evidence auditors ask for, mapped control by control.
04
How we deliver it
- 01Step 01Current-state assessment
- 02Step 02Remediation roadmap
- 03Step 03Policies and controls
- 04Step 04Audit readiness
05
Deliverables
- Gap analysis
- Policies & procedures
- Audit readiness
In every engagement
- An NDA before we start
- A report in Arabic and English
- An executive summary for leadership
- Findings shared over secure channels only
06
Related frameworks
- ECCEssential Cybersecurity Controls
- DCCData Cybersecurity Controls
- NIANational Information Assurance Standard
- PDPPLPersonal Data Privacy Protection Law No. 13 of 2016
- ISO 27001Information Security Management System
We help you comply; certification and accreditation are issued by the regulator.
07
What we need from you
A short list we go through together on the scoping call.
- 01The framework or standard you need to meet
- 02Your current policies and documents, however incomplete
- 03A representative from leadership and from IT
